up

bench/reachability-benchmark/schemas/examples/truth.sample.json

@@ -0,0 +1,37 @@
+{
+  "version": "1.0.0",
+  "cases": [
+    {
+      "case_id": "js-express-blog:001",
+      "case_version": "1.0.0",
+      "notes": "Baseline public case",
+      "sinks": [
+        {
+          "sink_id": "Deserializer::parse",
+          "label": "reachable",
+          "confidence": "high",
+          "dynamic_evidence": {
+            "covered_by_tests": [
+              "tests/test_reachable_deserialization.js::should_reach_sink"
+            ],
+            "coverage_files": [
+              "outputs/coverage.json"
+            ]
+          },
+          "static_evidence": {
+            "call_path": [
+              "POST /api/posts",
+              "PostsController.create",
+              "PostsService.createFromJson",
+              "Deserializer.parse"
+            ]
+          },
+          "config_conditions": [
+            "process.env.FEATURE_JSON_ENABLED == 'true'"
+          ],
+          "notes": "If FEATURE_JSON_ENABLED=false the path is unreachable"
+        }
+      ]
+    }
+  ]
+}